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CO> Meltwater 


Goal 


e Stay up to date with our dependencies 
e React faster in case of security updates 


e Do something about it 


<O> Meltwater 


dependabot.com 


e Checks for dependency updates 
e With configurable schedule 


e And configurable update types 
(major, minor, patch) 


<O> Meltwater 


dependabot requested your review on this pull request. 


Bump poison from 3.1.0 to 4.0.1 #31 


dependabot wants to merge 1 commit into master from dependabot/hex/poison-4.0.1 


(4) Conversation 1 © Commits 1 Ey Checks 0 Files changed 2 


Contributor + (ss) 


© dependabot bot commented on Jul 27 


Bumps poison from 3.1.0 to 4.0.1. 


Yv Commits 
e f5de8el Release 4.0.1 


èe af96087 Fix using UTF-8 characters with :htmi_safe escaping 

e 6b762ba Correctly format unicode token parser exceptions 
P u | | è 282188a Release 4.0.0 

e 8f689c5 Require Elixir >= 1.6 
e, > u @ Sst è aa22309 Merge pull request #170 from devinus/coveralls 

q e 8ea3b9f Add Coveralls coverage reports 

è 310@c@e8 Merge pull request #169 from devinus/mix-format 

e ab35adc Remove local LICENSE link 

è ac89db9 Use mix format 


Additional commits viewable in compare view 


WÈ compatibility 73% 


You can trigger a rebase of this PR by commenting @dependabot rebase . 


> Dependabot commands and options 


© Bump poison from 3.1.0 to 4.0.1 Verified X 45ae299 


© © dependabot bot requested review from mkorszun and vorce as code owners on Jul 27 


Add your review 


Edit 
+2 -2 EEEE 
Reviewers 
= vorce Ge 
E morszun Oe 
Assignees 


No one—assign yourself 


Labels 


Projects 


None yet 


Milestone 


No milestone 


Notifications 


qx Unsubscribe 


You're receiving notifications 
because your review was 
requested. 


2 participants 


ĝ Lock conversation 


<O> Meltwater 


Bump poison from 3.1.0 to 4.0.1 #31 Edit 


dependabot wants to merge 1 commit into master from dependabot/hex/poison-4.@.1 


(4! Conversation 1 © Commits 1 Ey Checks 0 Files changed 2 
Changes from all commits ~ Jumpto...~ +2-2 EEEE Diff settings v 
2 EE mix.exs View | CL 4 T y 
aes -40,7 +40,7 @@ defmodule GenRMQ.Mixfile do 


{:amap, "~> 1.0"}, 
{:credo, "~> 0.8", only: :dev}, 
{:excoveralls, "+> 0.9.1", only: :test}, 
e | 43 - {:poison, "~> 3.1", only: [:dev, :test]}, 
U 43 + {:poison, "~> 4.0", only: [:dev, :test]}, 
| | {:earmark, "~> 1.2", only: :dev}, 


Req uest , i {:ex_doc, "~> 0.18", only: :dev} 


“I> 


2 =n mix. lock View CL 4 vy 


“i 


-16,7 +16,7 @@ 
"metrics": {:hex, :metrics, "1.0.1", "25f094dea2cda98213cecc3aef f09e940299d950904393b2a29d191c346a8486", [:rebar3], 
"mimerl": {:hex, :mimerl, "1.0.2", "993f9b0e084083405ed8252b99460c4f0563e41729ab42d9074fd5e52439be88", [:rebar3], [] 
] "parse_trans": {:hex, :parse_trans, "3.2.0", e ea eienenns ive 7o cml ane nama a rt 
19 - "poison": {:hex, :poison, "3.1.0", "d9eb636610e096f86f25d9a46f35a9 509a7591b3be3326e% 84665 
19 + "poison": {:hex, :poison, "4.0.1", "bcb755a16fac91cad79] 385bbO7b92 fez 24bcc2d735709ae 
"rabbit_common": {:hex, :rabbit_common, "3.7.7", ' c@afdf060c091f43d7d6158889978a074a7a8e28a5e89b9e40c6a474ba295011", 
"ranch": {:hex, :ranch, "1.5.0", "f@4166f456790fee2acl1aa05a02745cc75783c2bfb26d39faf6aefc9a3d3a58a", [:rebar3], [], ' 
"ranch_proxy_protocol": {:hex, :ranch_proxy_protocol, "1.5.0", “e698aaeb59@ad504b649dc0d3055abeebcafOb49d3caeel1a0sear 





“> | 


You can talk to it 


mkorszun commented a day ago Member = + () 





@dependabot rebase 
ae 1 


e @dependabot rebase 

e @dependabot ignore this [patch|minor|major] 
e @dependabot ignore this dependency 

e @dependabot use these labels 


èe @dependabot use these reviewers 


e @dependabot use these assignees <O> Meltwater 


Thank You! 
Q&A 





Curious about more of the tech behind Meltwater? 
underthehood.meltwater.com 


<O> Meltwater 


You can 
talk to it 


Bump poison from 3.1.0 to 4.0.1 #31 


dependabot wants to merge 1 commit into master from dependabot/hex/poison-4.@.1 


pE Conversation 1 © Commits 1 y Checks 0 Files changed 2 


© dependabot bot commented on Jul 27 Contributor  +@ 


Bumps poison from 3.1.0 to 4.0.1. 


>» Commits 


& compatibility 73% 


You can trigger a rebase of this PR by commenting @dependabot rebase . 


¥ Dependabot commands and options 


You can trigger Dependabot actions by commenting on this PR: 


e @dependabot rebase will rebase this PR 
e @dependabot merge will merge this PR after your CI passes on it 


è @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot 
creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) 


e @dependabot reopen will reopen this PR 


è @dependabot ignore this dependency will close this PR and stop Dependabot creating any more 
for this dependency (unless you reopen the PR or upgrade to it yourself) 

e @Gdependabot use these labels will set the current labels as the default for future PRs for this 
repo and language 

èe @dependabot use these reviewers will set the current reviewers as the default for future PRs for 
this repo and language 

e @dependabot use these assignees will set the current assignees as the default for future PRs for 
this repo and language 


è @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge 
to your readme 


Additionally, you can set the following in your Dependabot dashboard: 


e Update frequency (including time of day and day of week) 

e Automerge options (never/patch/minor, and dev/runtime dependencies) 
ə Pull request limits (per update run and/or open at any time) 

e Out-of-range updates (receive only lockfile updates, if desired) 

è Security updates (receive only security updates, if desired) 


Finally, you can contact us by mentioning @dependabot. 


Edit 


+2 -2 EEEE 


Reviewers 


= vorce Ge 


mkorszun Ge 


Assignees 


No one—assign yourself 


Labels 


Projects 


None yet 


Milestone 


No milestone 


Notifications 


x Unsubscribe 


You're receiving notifications 
because your review was 
requested. 


2 participants 
KO 


£) Lock conversation 


<O> Meltwater 


